$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json) Hash identifier: k2L6phcCDOIki1Pr1RlPB3Q8GZKgo2QYEih4aJs/BQk= Subject key identifier: E3:28:FF:FC:AC:D2:DC:E2:00:F2:29:B6:B1:5A:01:AC:99:B0:21:42 Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft Manifest number: 0CBA Signing time: Sat 18 May 2024 18:49:44 +0000 Manifest this update: Sat 18 May 2024 18:49:43 +0000 Manifest next update: Sat 25 May 2024 18:49:43 +0000 Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: 21WS4hs3UjPiFlTMG2u7D/eoMgC4bqXQBpaMkLvi3Co=) 2: 8DD1E6B6E6FE11EE90BD3C1FC4F9AE02.roa (hash: za6m9jPb2lRjTKciCv9TcPmUsYTW1W+Cy6gPB6EGd5M=) 3: 8EB36E60E6FE11EE90BD3C1FC4F9AE02.roa (hash: tBe8qmvHuHH6DXNS3CNAhI+GmhXFgG8JrevEcsqZkfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC Validity Not Before: May 18 18:49:43 2024 GMT Not After : May 25 18:49:43 2024 GMT Subject: CN=6648f848-168f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:50:3f:15:f5:33:8a:0c:d6:b0:8f:32:f4:1b: 69:c6:b5:08:b5:bc:71:2d:c5:67:03:0c:93:f7:8b: 3f:3e:c1:81:d2:20:46:88:31:2c:3a:48:b4:09:2e: 67:28:2a:e1:b7:15:d0:c5:3a:ce:14:a2:5d:39:dd: 01:86:02:7b:0e:23:ab:c0:4f:db:3b:68:c1:a3:e7: 91:6b:f7:07:e3:37:b2:52:c9:9f:60:37:03:f7:4e: bd:2e:71:06:2b:31:3d:6b:7f:1e:29:e2:9b:2d:00: 03:90:21:96:bf:9e:db:39:68:ff:4d:d6:a1:97:5a: 77:0e:1d:7c:02:bd:62:45:59:c1:6b:23:24:05:d7: a9:ea:92:a7:39:c0:05:43:90:bb:62:ea:2f:5a:9d: 9f:dc:96:3e:0c:e5:04:dc:9d:88:4d:6f:6e:12:69: c3:8f:32:86:42:cf:d9:5c:a6:f5:7c:71:63:05:30: b6:b0:9e:23:16:51:e6:ad:65:bb:c1:40:05:90:74: 40:1c:22:83:e0:dc:d5:bf:35:d9:80:b3:51:30:8d: b7:5d:bd:85:5b:57:7a:a7:d5:fb:80:7b:a1:a4:92: 6e:28:39:05:9f:79:b4:7a:db:58:c6:41:e9:ab:4f: 49:cf:7e:6d:7b:62:83:c0:c1:b3:e7:90:db:ed:bc: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:28:FF:FC:AC:D2:DC:E2:00:F2:29:B6:B1:5A:01:AC:99:B0:21:42 X509v3 Authority Key Identifier: keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:1b:a4:0d:ab:53:6d:2c:f2:48:7d:ec:62:09:98:47:87:04: 77:d3:58:58:98:ab:05:b0:71:bb:be:c6:88:07:7a:32:15:85: 48:a2:7a:01:2a:fe:5e:48:55:4d:cf:55:5c:84:72:04:52:f3: 0e:97:84:c8:50:d9:f6:08:f3:3a:7e:6e:15:91:53:80:b0:44: 72:3c:8b:b8:e5:fb:c3:ea:b9:79:ce:89:95:c0:6d:89:d5:cd: f9:1b:98:df:ec:d8:5b:05:e2:1e:9f:c8:a8:51:9e:93:31:4a: 56:6a:03:2c:a1:cc:27:cb:5f:2b:01:82:fe:b6:69:67:eb:41: 1e:05:fd:c9:30:29:a8:1c:83:72:ce:4d:5b:ef:d4:c4:06:c4: 51:e7:36:4f:48:91:b2:23:e5:cb:c0:de:8d:42:1c:cf:fa:7c: bb:56:a9:00:00:6f:0a:5e:28:43:d4:19:75:66:38:91:88:38: 0b:f2:06:81:42:2b:98:94:a0:4a:3d:eb:1b:7e:3b:47:51:e2: ec:47:c3:71:dc:dd:8e:6a:a6:d9:f5:d7:d9:41:b1:ae:bd:62: 28:ca:33:68:ed:fa:7e:fd:78:f2:68:db:50:c6:12:0b:78:0b: 23:b6:4a:d1:33:2c:d3:01:55:f4:41:1a:fb:72:99:49:c1:4d: 78:35:08:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1 NzQ3NzY3QUMwHhcNMjQwNTE4MTg0OTQzWhcNMjQwNTI1MTg0OTQzWjAYMRYwFAYD VQQDEw02NjQ4Zjg0OC0xNjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lA/FfUzigzWsI8y9BtpxrUItbxxLcVnAwyT94s/PsGB0iBGiDEsOki0CS5n KCrhtxXQxTrOFKJdOd0BhgJ7DiOrwE/bO2jBo+eRa/cH4zeyUsmfYDcD9069LnEG KzE9a38eKeKbLQADkCGWv57bOWj/Tdahl1p3Dh18Ar1iRVnBayMkBdep6pKnOcAF Q5C7YuovWp2f3JY+DOUE3J2ITW9uEmnDjzKGQs/ZXKb1fHFjBTC2sJ4jFlHmrWW7 wUAFkHRAHCKD4NzVvzXZgLNRMI23Xb2FW1d6p9X7gHuhpJJuKDkFn3m0ettYxkHp q09Jz35te2KDwMGz55Db7bx+1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMo//ys 0tziAPIptrFaAayZsCFCMB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2G6QNq1NtLPJIfexiCZhHhwR301hYmKsFsHG7vsaIB3oyFYVIonoB Kv5eSFVNz1VchHIEUvMOl4TIUNn2CPM6fm4VkVOAsERyPIu45fvD6rl5zomVwG2J 1c35G5jf7NhbBeIen8ioUZ6TMUpWagMsocwny18rAYL+tmln60EeBf3JMCmoHINy zk1b79TEBsRR5zZPSJGyI+XLwN6NQhzP+ny7VqkAAG8KXihD1Bl1ZjiRiDgL8gaB QiuYlKBKPesbfjtHUeLsR8Nx3N2OaqbZ9dfZQbGuvWIoyjNo7fp+/XjyaNtQxhIL eAsjtkrRMyzTAVX0QRr7cplJwU14NQhg -----END CERTIFICATE-----Generated at Sat May 18 20:15:58 2024 by rpki-client on console-ams.rpki-client.org